Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF9350A757611F1BD7F0BE2CE1D38B0.roa
File: ABF9350A757611F1BD7F0BE2CE1D38B0.roa (raw, json)
Hash identifier: XrVbUT5nSVvp+KcyxIAnmobh0z6QUNBj+Zt+0PvU+WQ=
Subject key identifier: 82:29:E1:D8:20:65:84:7F:75:65:34:C6:B3:2E:05:D1:33:2A:46:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D658
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF9350A757611F1BD7F0BE2CE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:59:58 +0000
ROA not before: Wed 01 Jul 2026 17:59:53 +0000
ROA not after: Sat 01 Aug 2026 17:59:53 +0000
asID: 401783
IP address blocks: 154.81.160.0/24 maxlen: 24
154.81.162.0/24 maxlen: 24
154.81.165.0/24 maxlen: 24
154.81.167.0/24 maxlen: 24
154.81.168.0/24 maxlen: 24
154.81.169.0/24 maxlen: 24
154.81.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120408 (0x1d658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 17:59:53 2026 GMT
Not After : Aug 1 17:59:53 2026 GMT
Subject: CN=6a45559e-79ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:0d:d8:17:c1:48:79:50:bc:50:7f:86:17:
04:4d:6a:7c:08:92:d9:32:0a:03:03:d7:ff:bc:11:
21:5b:f8:3a:3c:bd:32:bf:d3:1d:b4:5d:97:58:c4:
01:bb:fe:3d:1a:f3:bf:f7:d8:3b:74:8b:25:4d:fa:
e4:f7:cb:7c:19:57:3c:a8:ce:2b:4c:e9:ff:f9:58:
9a:b9:92:5f:2a:b3:47:1e:a3:eb:e9:1f:c7:51:90:
5e:69:a2:2f:ce:9e:4c:9a:da:32:55:bb:d9:6b:f4:
31:cf:dc:05:f2:95:c8:27:70:78:65:3f:2f:3c:17:
12:88:ee:57:68:78:db:c0:7d:8c:32:ab:1f:13:94:
ce:98:fc:b3:97:0c:bf:04:9d:f2:56:d6:38:8f:6b:
7f:dd:ac:86:1a:63:92:89:e6:26:4b:0d:c7:5d:2a:
7b:c3:5d:bf:a4:46:8d:1d:99:19:86:89:11:e5:82:
ca:73:6e:30:14:36:e7:b4:c5:bf:a4:bc:14:66:70:
db:48:be:df:80:c0:2d:3f:39:87:4e:29:4f:e8:82:
f0:0b:37:87:33:8a:d9:25:23:3f:44:ed:9b:c4:62:
d6:e3:51:12:e1:53:75:d3:4f:eb:00:31:d7:77:7a:
10:85:ed:15:7d:3c:3e:12:1e:d2:6e:fa:c7:12:94:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:29:E1:D8:20:65:84:7F:75:65:34:C6:B3:2E:05:D1:33:2A:46:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF9350A757611F1BD7F0BE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
154.81.162.0/24
154.81.165.0/24
154.81.167.0-154.81.169.255
154.81.171.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8f:0a:c9:e6:59:f3:d6:95:1e:00:24:8f:71:b8:4f:33:41:
67:3c:54:d4:92:7a:5b:9f:ee:f3:93:b6:82:a7:de:33:23:27:
e8:09:cc:7f:ca:96:38:f7:d8:0e:f3:44:f9:01:78:da:31:d6:
55:ce:25:d5:7f:7c:a1:a5:5e:72:e7:a3:ad:43:46:81:75:52:
56:2b:fe:19:ac:eb:bc:3f:e9:03:1e:58:6f:d3:b8:e0:0c:4b:
7b:70:9d:af:8d:e9:46:30:b0:9a:4a:24:c8:83:3e:c2:f2:f8:
b1:dd:0e:8c:e8:74:86:a0:67:17:50:29:03:69:14:23:cf:24:
11:28:07:10:4f:cb:a0:f7:44:7f:17:ce:fe:89:9c:80:e5:aa:
7c:55:8c:b0:ad:56:76:1e:8c:33:f6:dc:9c:bc:99:44:1e:bd:
e9:4b:bf:6a:06:ec:42:b1:8e:89:ef:c8:00:cd:78:63:70:9a:
5a:d8:70:aa:a3:57:bd:41:98:02:4a:44:8a:8b:90:cb:fb:09:
a0:7b:c0:22:7a:75:68:d2:29:16:e2:31:12:99:dc:b8:41:e6:
87:a6:98:ed:a0:43:09:ad:dc:e9:a1:92:49:7f:ae:f5:ed:6f:
3c:7c:3e:c8:e9:7f:c4:c7:e8:ff:58:57:a9:de:99:68:63:71:
19:5d:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:20 2026 by rpki-client